Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AF0521E1886A48D28DA3941D93D6E96AB9E6B19EB0AA1B5349248D8BF241885/0/3137392e302e31372e302f32342d3234203d3e203136353039.roa
File:                     3137392e302e31372e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          lzjfDYWhLZ0y9Lo1sC+yQeuT0NyiEFlzDBvnGXiZZAo=
Subject key identifier:   85:59:0B:0D:29:90:89:A7:26:2E:21:91:C8:C2:AD:F6:8A:DB:03:AD
Certificate issuer:       /CN=4D3731B188E63A6529152A8685DFD3BD0CB35A82
Certificate serial:       1A0139ABFC4BD71FB2AD7C3C055BFD359FBD51F8
Authority key identifier: 4D:37:31:B1:88:E6:3A:65:29:15:2A:86:85:DF:D3:BD:0C:B3:5A:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D3731B188E63A6529152A8685DFD3BD0CB35A82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AF0521E1886A48D28DA3941D93D6E96AB9E6B19EB0AA1B5349248D8BF241885/0/3137392e302e31372e302f32342d3234203d3e203136353039.roa
Signing time:             Tue 05 Mar 2024 17:45:35 +0000
ROA not before:           Tue 05 Mar 2024 17:40:35 +0000
ROA not after:            Tue 04 Mar 2025 17:45:35 +0000
asID:                     16509
IP address blocks:        179.0.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AF0521E1886A48D28DA3941D93D6E96AB9E6B19EB0AA1B5349248D8BF241885/0/4D3731B188E63A6529152A8685DFD3BD0CB35A82.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AF0521E1886A48D28DA3941D93D6E96AB9E6B19EB0AA1B5349248D8BF241885/0/4D3731B188E63A6529152A8685DFD3BD0CB35A82.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D3731B188E63A6529152A8685DFD3BD0CB35A82.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 10:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:01:39:ab:fc:4b:d7:1f:b2:ad:7c:3c:05:5b:fd:35:9f:bd:51:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D3731B188E63A6529152A8685DFD3BD0CB35A82
        Validity
            Not Before: Mar  5 17:40:35 2024 GMT
            Not After : Mar  4 17:45:35 2025 GMT
        Subject: CN=85590B0D299089A7262E2191C8C2ADF68ADB03AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:af:95:9f:3c:b5:a4:f2:72:db:e4:22:24:a0:
                    f2:6d:7b:81:44:d9:36:ea:7e:31:5f:f1:60:c9:ca:
                    46:5e:5b:7b:50:de:d1:f6:fb:00:e9:10:50:9d:22:
                    fd:c4:0f:1f:f3:0d:21:2f:02:3c:02:2c:6c:37:d6:
                    a8:ab:dc:b4:63:c8:14:ff:b7:7e:41:a3:06:f3:2c:
                    e9:f1:d5:53:90:49:1c:b5:b4:69:c8:be:56:22:01:
                    3f:15:07:24:0b:31:0b:53:27:2d:9b:b6:05:13:4a:
                    76:1b:73:67:44:36:a0:47:df:8c:87:8e:4d:9e:ad:
                    66:95:f3:92:16:08:c8:2f:2d:47:52:ef:78:38:f8:
                    cf:83:88:03:a4:2c:41:fd:3f:3e:3b:b2:65:62:74:
                    5c:e1:8d:bf:c2:dd:bb:d9:85:00:c8:75:1c:d5:cb:
                    69:39:6f:e1:94:5a:2b:13:5b:5a:73:04:d2:14:75:
                    87:82:b2:c8:4d:e3:65:52:f0:3e:b4:e3:f4:1b:7e:
                    15:55:83:90:b1:da:b8:03:b0:99:29:8e:96:fb:e2:
                    b2:f6:80:86:75:1d:1e:f3:c8:34:69:0e:24:a6:2f:
                    da:37:d6:1c:b7:c2:ed:67:09:12:82:d2:36:f9:dd:
                    cb:4c:29:72:86:ec:fb:10:d5:58:14:34:02:88:f5:
                    4d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:59:0B:0D:29:90:89:A7:26:2E:21:91:C8:C2:AD:F6:8A:DB:03:AD
            X509v3 Authority Key Identifier:
                keyid:4D:37:31:B1:88:E6:3A:65:29:15:2A:86:85:DF:D3:BD:0C:B3:5A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AF0521E1886A48D28DA3941D93D6E96AB9E6B19EB0AA1B5349248D8BF241885/0/4D3731B188E63A6529152A8685DFD3BD0CB35A82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D3731B188E63A6529152A8685DFD3BD0CB35A82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AF0521E1886A48D28DA3941D93D6E96AB9E6B19EB0AA1B5349248D8BF241885/0/3137392e302e31372e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:d8:f7:0b:2b:e5:55:d0:5b:c2:76:6c:68:71:54:6c:09:98:
         f4:8a:3d:38:7d:c5:08:33:ef:e6:7a:a4:ce:33:57:1d:dd:43:
         b3:c1:6c:4a:40:b4:6f:d9:24:82:f7:c2:79:00:ad:7d:5b:0a:
         f9:fa:6c:5d:af:26:07:fd:e0:e3:b5:a5:c0:3e:27:0f:47:0b:
         c1:4c:4f:77:ac:06:30:dc:a2:5a:ce:82:80:e3:e0:39:f6:eb:
         dd:fb:98:93:30:7c:44:1c:48:ee:15:71:e6:61:b6:9d:75:45:
         24:9e:57:0d:dd:b2:65:64:c2:ba:a4:82:1c:4c:ac:27:f0:59:
         1b:f2:e6:d5:62:cc:79:9b:68:81:20:ae:25:da:97:0c:98:d6:
         6d:8d:45:59:96:52:81:02:59:38:a8:a4:0b:f9:6c:ca:54:11:
         91:76:db:ac:6e:60:0b:0a:d4:34:9e:40:05:13:69:c6:08:a3:
         20:fa:01:77:83:c4:fb:00:b5:5c:f1:7b:25:68:8b:75:cd:c4:
         80:2b:5d:eb:e5:3f:b1:24:a1:31:da:6a:50:5c:5d:15:94:76:
         f2:5d:ef:05:2e:c2:d9:48:61:8b:bf:f7:09:cb:58:6c:04:f5:
         26:d1:55:6a:a4:90:1a:63:cf:cf:87:4f:d5:20:b0:0e:a5:15:
         f6:0d:40:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:12:03 2024 by rpki-client on console-fra.rpki-client.org